Medium-risk security reports

The website at inchev.com currently presents no accessible content, with an empty HTML body and no metadata, forms, or visible information. The domain is registered since 2014 with a stable registrar and uses Cloudflare DNS, indicating a legitimate registration. However, the lack of content and absence of security or privacy policies severely limit the ability to assess the business or security posture. The technical infrastructure appears minimal, with no detected CMS or frameworks, and no security headers or SSL configuration data available. This results in a low security posture and poor privacy compliance. Overall, the site is either under development, misconfigured, or intentionally blocked by security mechanisms, leading to a critical risk of poor user trust and compliance issues.

Plerdy is a technology company specializing in conversion rate optimization (CRO) and SEO tools designed to help businesses improve website usability, track user behavior, and increase sales conversions. Their platform offers a comprehensive suite of products including heatmaps, session replay, pop-up software, ecommerce analytics, and AI-powered UX assistance. The company targets digital marketers, UX specialists, and e-commerce businesses seeking data-driven insights to optimize their online presence. The website is professionally designed, mobile-optimized, and rich in content, featuring client testimonials and endorsements from global enterprises, which positions Plerdy as a credible player in the CRO and SEO market. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, along with integrations for Google Analytics 4, Bing UET, and LinkedIn Insight for analytics and marketing. The site employs SSL encryption and has a cookie consent mechanism, indicating a good level of privacy compliance. However, some security headers are not explicitly detected, and there is no visible incident response or vulnerability disclosure information, which could be improved to enhance security posture. From a security perspective, the site demonstrates solid fundamentals with HTTPS and published privacy and security policies. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and comprehensive policies mitigate concerns. No critical vulnerabilities or suspicious content were detected. Overall, Plerdy maintains a strong security and privacy stance suitable for its business model. The overall risk assessment is low, with recommendations to enhance security headers, publish incident response contacts, and consider a security.txt file for vulnerability reporting. These steps would further strengthen trust and compliance. The website’s technical infrastructure is modern and well-maintained, supporting a positive user experience and effective marketing analytics.

Sellcodes is an online marketplace specializing in the buying and selling of software codes, including themes, plugins, scripts, and software licenses. Founded in 2016, the platform currently operates in a limited capacity, processing payments exclusively for digital products licensed by its partner Inisev. The website targets software developers and digital product creators seeking a marketplace to monetize or acquire code assets. Technically, Sellcodes employs a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries, with integrations for payment processing via Paddle and analytics through Google services. The site is hosted with a reputable registrar and uses Cloudflare DNS, ensuring stable domain management and HTTPS security. Security posture is moderate, with HTTPS enforced and CSRF protections in place, but lacks DNSSEC and explicit security headers. Privacy compliance is basic, with privacy and terms pages present but no cookie consent mechanism or detailed GDPR indicators. Overall, the website is professionally designed, user-friendly, and safe for general audiences, though improvements in security policies and privacy compliance are recommended.

MyPopUps is a specialized SaaS platform founded in 2017 that offers website owners and marketers a comprehensive solution to create and deploy customizable pop-ups. The platform provides a marketplace of ready-made pop-up themes and an advanced builder tool to create pop-ups for email collection, discount codes, cookie notices, and adblocker detection. The business targets digital marketers and website owners seeking to enhance user engagement and conversion rates through pop-ups. Technically, the website leverages modern JavaScript frameworks (likely Vue.js), integrates with popular analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager, and uses Cloudflare DNS for domain management. The site is hosted with a reputable registrar and employs HTTPS for secure communications. Security posture is solid but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the website is professional, functional, and trustworthy with moderate risk and room for security and compliance enhancements.

The website 'Travailler dans l'Orne' is a regional employment platform operated by the Orne Département, a local government entity in France. It serves as a centralized portal for job seekers and recruiters within the Orne department, offering job listings, training opportunities, internships, and alternance contracts. The platform also provides a CV analysis feature to better match candidates with relevant job offers. The site targets local residents and businesses, positioning itself as a key regional employment resource. Technically, the website employs modern JavaScript frameworks such as Turbo (Hotwire) and StimulusJS, and integrates analytics tools including Google Tag Manager and Piano Analytics. Hosting is provided by OVH sas, a reputable French hosting provider. The site is mobile-optimized with a good user experience and clear navigation. Security-wise, the site uses HTTPS and domain-level protections like clientDeleteProhibited and clientTransferProhibited statuses, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is primarily via forms, with no explicit emails or phone numbers listed. Overall, the website is professional, trustworthy, and well-aligned with its government mandate, but could improve security and privacy practices.

The website www.villeveyrac.fr serves as the official digital presence of the Mairie de Villeveyrac, a local government entity in France. It provides residents and visitors with access to municipal news, upcoming events, public services, and citizen participation tools. The site is well-structured with multilingual support and integrates community-focused services such as urban planning, police municipal information, and youth services. The business model is centered on public service delivery and community engagement, positioning it as a key local government resource. Technically, the website employs modern web technologies including JavaScript frameworks, Matomo analytics for user tracking, and responsive design principles ensuring good mobile optimization. The site is built on the illiwap platform, which is specialized for municipal digital services. Performance is moderate with good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses secure input validation for phone numbers. However, it lacks explicit security headers, a cookie consent mechanism, and a vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for this type of entity. Overall, the website is trustworthy, professional, and serves its intended audience effectively. Strategic recommendations include enhancing privacy compliance with cookie consent, implementing security headers, and publishing a vulnerability disclosure policy to strengthen security posture and user trust.

The website www.ville-marseillan.fr serves as the official digital portal for the municipal government of Marseillan, France. It provides residents and visitors with access to municipal news, public service notifications, beach weather updates, and live webcam feeds. The site targets local citizens and tourists, offering essential government services and information. The business model is that of a government entity providing public information and services online. Technically, the site is built on WordPress CMS with a custom theme and uses modern web technologies including jQuery and Matomo for analytics. It incorporates accessibility features and multilingual support via Google Translate. The site is well-optimized for SEO and mobile devices, with good performance and structured data markup enhancing search visibility. From a security perspective, the site enforces HTTPS, includes standard security headers, and does not expose sensitive data. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. However, there is no explicit security policy or incident response information published, which could be improved. Overall, the website demonstrates a solid security posture and professional digital presence appropriate for a municipal government. The lack of WHOIS data is likely due to privacy protection, which is reasonable for this type of entity. Strategic recommendations include publishing a dedicated security policy, enhancing incident response transparency, and maintaining regular security audits to ensure ongoing protection.

The website ville-gigean.fr is the official online presence of the municipal government of Gigean, a commune in the Hérault department of France. It provides residents and visitors with municipal information, local news, event calendars, administrative procedures, and contact options. The site targets local citizens and stakeholders interested in community services and updates. The business model is public service oriented, with no commercial intent, focusing on transparency and community engagement. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap 5, jQuery, Vue.js, and popular UI libraries like Font Awesome and Slick Carousel. Hosting is provided by OVH, a reputable French hosting provider. The site demonstrates good mobile optimization, accessibility features, and SEO practices, though performance is moderate likely due to rich media and scripts. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms with high privacy settings. It uses reCAPTCHA for form protection and social sharing tools with minimal tracking. However, explicit security headers like CSP and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. No vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements. It serves its purpose as a municipal information portal effectively. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to improve transparency and resilience.

The website ville-balaruc-les-bains.com serves as the official municipal portal for the town of Balaruc-les-Bains in France. It provides comprehensive information about the town's thermal spa services, cultural events, public services, urban planning, and social programs. The site targets residents, tourists, and local citizens, positioning itself as a key information hub for the community. The business model is that of a government entity providing public services and information. The website is well-branded and consistent with municipal identity. Technically, the site is built on Drupal 9 CMS with Bootstrap Barrio theme and uses modern web technologies including Font Awesome and Leaflet.js for maps. Google Tag Manager and reCAPTCHA are integrated for analytics and form security. The site is mobile optimized and accessible with good SEO practices. Hosting appears stable with a domain age since 2003, indicating maturity. From a security perspective, HTTPS is enabled and forms are protected with reCAPTCHA. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. No vulnerability disclosure or security.txt file is present. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy policy found. Social media presence is strong, enhancing trust. Overall, the website is safe, professional, and trustworthy with moderate security posture and good business credibility. Recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and security policies, and improving privacy compliance documentation.

The website shb-rando.fr serves as an informational and community resource for the commune of Saint-Hilaire-de-Brethmas in France, focusing on heritage, sports, biodiversity, and geology trails. It targets families, hikers, cyclists, and nature enthusiasts, providing detailed trail information, interactive maps, and local cultural content. The site is positioned as a local government or community service platform, supported by municipal and regional partners. Technically, the site is built on WordPress with common plugins such as WooCommerce, Yoast SEO, and WPBakery, hosted by OVH. It uses modern web technologies and is mobile-optimized with embedded OpenStreetMap maps for enhanced user experience. Security posture is moderate with HTTPS enabled and domain transfer protections, but lacks explicit security headers and privacy/cookie policies, which are compliance gaps. Analytics usage includes Google Analytics via Site Kit, with moderate user tracking. Overall, the site is professional, trustworthy, and serves its community well but should improve privacy compliance and security headers to enhance trust and regulatory adherence.

Tiempo.com, operated by Meteored, is a well-established Spanish-language weather information portal offering detailed 14-day forecasts, meteorological news, videos, and weather alerts. The site targets a broad general audience interested in weather updates primarily in Spain and other Spanish-speaking regions. It maintains a strong digital presence with mobile applications across Android, iOS, Huawei, and Windows platforms, and integrates social media channels to engage users. Technically, the website employs modern web technologies including asynchronous JavaScript bundles, Google Tag Manager, header bidding for advertising, and Cloudflare for performance and security. The site is optimized for desktop and mobile devices, with good SEO and accessibility practices. Privacy compliance is robust, featuring GDPR-compliant cookie consent mechanisms and detailed privacy policies. From a security perspective, the site enforces HTTPS and uses standard security practices, though explicit security headers are not fully confirmed. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of WHOIS registration data raises concerns about domain registration transparency, which could impact trustworthiness. Overall, Tiempo.com presents a professional and trustworthy weather service with strong content and technical maturity. The main risk lies in the lack of visible domain registration information, which should be addressed to enhance credibility and compliance.

The Opéra national du Rhin website serves as the digital presence for a regional cultural institution specializing in opera and performing arts in France. It offers detailed event listings, ticketing options, and multimedia content to engage its audience. The site is built on modern web technologies including Roadiz CMS and Vue.js, providing a responsive and visually appealing user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not clearly presented. The absence of public WHOIS data is consistent with EURid's privacy policies and does not detract from the site's legitimacy. Overall, the website reflects a professional and trustworthy cultural organization with room for improvement in transparency and security documentation.

Parc Expo de Mulhouse is a well-established event venue and exhibition center located in Mulhouse, France, founded in 1996. The company operates as Mulhouse Expo SAEML and offers modular, functional spaces for hosting salons, congresses, fairs, and cultural events. The website reflects a regional market position targeting event organizers and visitors in the Mulhouse area and surrounding regions. The business model centers on venue rental and event hosting services, supported by a comprehensive event agenda and partnerships with various event organizers. The site content is professionally presented in French, with clear navigation and consistent branding.

Noumatrouff is a cultural organization and music venue based in Mulhouse, France, operating as Fédération Hiéro Mulhouse. The website serves as a portal for concerts, rehearsal studio bookings, workshops, and membership subscriptions, targeting musicians and local music enthusiasts. The business model relies on event ticketing, studio rentals, and community engagement. The site links to partner platforms for ticket sales and studio reservations, indicating a collaborative ecosystem. Technically, the website is built on WordPress with common plugins for galleries, forms, and cookie management, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy policies. The absence of WHOIS data limits domain trust verification, though the website content and external references suggest legitimacy. Overall, Noumatrouff presents as a professional cultural entity with room for improvement in privacy and security transparency.

Le Squart Mulhouse is a small non-profit cultural association founded in 2016, focused on supporting artists in the Mulhouse region through professionalization of artistic projects, pedagogical workshops, and event organization. The website serves as an informational platform showcasing their services and mission to the local artistic community. Technically, the site is built on WordPress with common plugins such as Yoast SEO and SiteOrigin widgets, hosted by OVH, and demonstrates moderate performance and good mobile optimization. Security posture is basic with HTTPS assumed but lacking explicit security headers and privacy compliance documentation. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

La Kunsthalle is a French contemporary art center operated by the city of Mulhouse, established since 2008. It serves as a cultural institution offering exhibitions, artist residencies, mediation programs, and publishing activities. The website targets the general public interested in contemporary art and is positioned as a nationally recognized center supported by public and regional cultural bodies. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, and uses Google Analytics for visitor tracking. The site is moderately optimized for mobile and SEO, with a good content structure and navigation. Security-wise, the site uses HTTPS and domain registration protections but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is weak, with no cookie consent mechanism despite tracking scripts. Overall, the website is professional and trustworthy but could improve in privacy and security practices.

Mulhouse C'est Vous is a French local government participatory platform operated by the Ville de Mulhouse, designed to facilitate citizen engagement, project collaboration, and community participation. The platform offers a variety of services including project proposals, consultations, event calendars, and newsletters targeting citizens, associations, municipal agents, and institutions within Mulhouse. The website is well-established since 2015 and maintains a consistent brand and professional content quality. Technically, it leverages modern web technologies such as React, Bootstrap, and Google APIs, integrated within a Symfony-based backend and the Cap Collectif participatory platform framework. Security posture is solid with HTTPS enforcement, CAPTCHA protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with comprehensive GDPR-aligned policies and a named Data Protection Officer. Overall, the site is trustworthy, well-maintained, and serves its public sector mission effectively.

XTuning is a professional automotive tuning company specializing in chip tuning services for passenger cars, agricultural machinery, and trucks. Established since 1999, the company operates primarily in the Czech Republic and neighboring countries, offering performance optimization and fuel consumption reduction services. The website reflects a mature digital presence with certifications from the Ministry of Transport and TÜV SÜD, enhancing trust and credibility. Technically, the site uses modern frameworks like Bootstrap and integrates multiple marketing and analytics tools with proper consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract from the professional presentation and business legitimacy. Overall, XTuning demonstrates a solid market position with clear service offerings and customer engagement channels.

Vacances Scolaires is a specialized informational website dedicated to providing official French school holiday calendars for multiple years (2025-2027), covering metropolitan zones A, B, C, Corse, and overseas territories. The site targets parents, students, and educators seeking authoritative and up-to-date holiday schedules, offering downloadable PDFs and iCal files for easy integration into personal calendars. The business model relies primarily on advertising revenue and affiliate marketing partnerships. Technically, the site employs modern web technologies including Bootstrap 5, jQuery, FontAwesome, and Google Fonts, hosted on a reputable French hosting provider (o2switch). It integrates Google Adsense for monetization and Matomo for analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is generally good with HTTPS enforced and basic protections, though minor backend PHP warnings and lack of explicit security headers suggest areas for improvement. The domain is newly registered in late 2023, consistent with the site's focus on future school years, and WHOIS data shows no suspicious patterns. Overall, the website is professional, trustworthy, and well-optimized for its niche audience.

Entreprendredanslorne.com is a regional business facilitation platform focused on supporting companies seeking to establish operations in the Orne department of Normandy, France. The website offers services including project accompaniment, real estate and land search, public aid identification, and networking with local actors. It positions itself as a key regional player providing a free and tailored support network for business implantation. The site is linked to regional government entities, enhancing its credibility. Technically, the website employs a modern front-end stack including Bootstrap 3.3.7, jQuery, Font Awesome, Google Fonts, and interactive components like FlexSlider and Owl Carousel. It integrates Google Analytics, Google Tag Manager, and SnapEngage chat for user engagement and analytics. Security measures include HTTPS with reCAPTCHA v3 on forms, but lack explicit security headers and cookie consent mechanisms. The security posture is moderate with good SSL configuration and secure form handling, but improvements are needed in security headers and privacy compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact details suggest a legitimate regional business service. Overall, the site is professional and functional but would benefit from enhanced security and compliance transparency. Strategically, verifying domain registration and adding explicit privacy and security policies would strengthen trust. Enhancing security headers and cookie consent would improve compliance and user trust. Continued monitoring of third-party scripts and analytics is recommended to mitigate potential vulnerabilities.

Pays d'Argentan d'Auge et d'Ouche (P2AO) is a regional governmental entity focused on supporting local businesses and territorial development in the Argentan, Auge, and Ouche regions of France. The website serves as an informational portal providing event agendas and contact avenues for stakeholders. The business model is public administration with a focus on regional economic and community development. The site targets local businesses, residents, and regional partners. Technically, the website employs basic web technologies including jQuery and Google Analytics for user tracking. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. The absence of a CMS or modern frameworks suggests a simple, possibly custom-built site. No hosting provider or SSL configuration details were identified from the provided data. From a security perspective, the site uses a cookie consent banner indicating GDPR awareness but lacks visible privacy policies, terms of service, or security headers. WHOIS data is unavailable, which reduces domain trustworthiness. No WAF or blocking mechanisms were detected, and the site is accessible without restrictions. The security posture is moderate but could be improved by implementing HTTPS, security headers, and publishing clear privacy and incident response policies. Overall, the website is functional but basic, with room for improvement in content richness, security, and compliance documentation. The domain legitimacy is uncertain due to missing WHOIS data, but the content and contact information suggest a legitimate regional government presence.

France Travail is a French governmental employment platform providing a comprehensive range of services including job offer searches, allocation and aid estimations, online registration for job seekers, and dedicated employer services. The website is well-branded, professionally designed, and targets job seekers and employers across France. It serves as a national public employment service with a large user base and extensive content offerings. Technically, the site uses modern web technologies including JavaScript frameworks, Dynatrace monitoring, and Piano Analytics for performance and user behavior tracking. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and secure form practices, though explicit security headers and incident response information are not visible. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and safe, with no suspicious or adult content detected.

SHEMA is a French regional public-private mixed economy company specializing in urban development, public facility construction, and business real estate in Normandy. It serves local authorities and economic actors with a strong regional presence and a portfolio of ongoing projects. The website reflects a professional and well-structured digital presence with clear business information and modern technology use. The technical infrastructure is based on WordPress with performance optimizations and privacy compliance mechanisms in place. Security posture is good with HTTPS and cookie consent but lacks explicit security headers and incident response contacts. WHOIS data is missing, which slightly impacts trust but the overall legitimacy is supported by the website content and contact information. Strategic recommendations include enhancing security headers, publishing a security policy, and monitoring domain registration details.

The website at pepite3ef.fr is currently inaccessible due to a TYPO3 CMS configuration error related to the trusted hosts pattern, resulting in an HTTP 503 error page. This prevents access to any meaningful content or business information. The domain is registered through OVH, a reputable French registrar, with a creation date in 2014, indicating a mature domain age consistent with a small or medium-sized French entity. The hosting provider is OVH, and the CMS in use is TYPO3. No privacy, cookie, or terms of service policies are present, and no contact information or forms are accessible. The lack of accessible content and security headers limits the ability to fully assess the website's security posture or compliance status.

Santé publique France is the official French national public health agency, providing authoritative information, surveillance, and prevention services related to public health. The website serves a broad audience including the general public, healthcare professionals, and policymakers. It is positioned as a key government institution in the healthcare sector in France, offering publications, studies, and health data. Technically, the site uses modern JavaScript libraries, Google reCAPTCHA for bot protection, and New Relic for performance monitoring, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy policy documentation in the provided content. Security posture is good with no evident vulnerabilities, but could be improved with better security headers and published incident response information. Overall, the site is trustworthy and professional, with a strong business credibility as a government entity.

The Institut national de l’information géographique et forestière (IGN) is a French government entity specializing in the production and dissemination of geographic and forestry data. The website serves a diverse audience including individuals, professionals, public policy actors, educators, and students. It offers a comprehensive range of cartographic services, data access, and applications, positioning itself as the authoritative national geographic data provider in France. The business model is public service-oriented, focusing on data accessibility and support for various user needs. Technically, the website is built on Drupal 10, leveraging modern web technologies such as JavaScript and CSS, with good mobile optimization and accessibility features. The site demonstrates moderate performance and good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. The lack of publicly available WHOIS data is typical for .fr domains and does not detract from the legitimacy of the site. The presence of official contact information, social media channels, and comprehensive policies further enhance credibility. Strategic recommendations include enhancing security transparency and formalizing vulnerability disclosure mechanisms.

Assistance publique - Hôpitaux de Paris (AP-HP) is the largest public healthcare institution in Europe, operating 38 hospitals and serving millions of patients annually. The website provides comprehensive information on patient care, research, education, and innovation, targeting patients, healthcare professionals, researchers, and partners. The digital infrastructure is built on Drupal CMS with modern web technologies, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. WHOIS data is missing, which is unusual but likely due to AFNIC policies or privacy protection, not indicating malicious intent. Overall, the website is professional, trustworthy, and compliant with GDPR.

Anses is the French national agency responsible for health safety in food, environment, and work sectors. It provides scientific expertise, risk assessment, regulatory decisions, and public communication. The agency holds a strong market position as a government authority with a large organizational size and a comprehensive digital presence. The website is built on Drupal 10 with modern frontend technologies and includes multilingual support. Privacy and cookie consent mechanisms are implemented effectively. However, WHOIS data is missing, which slightly impacts domain trustworthiness. The site demonstrates good security practices but lacks explicit security policy and incident response information.

École nationale des ponts et chaussées is a prestigious French grande école specializing in engineering education, research, and professional training with a strong focus on ecological and digital transitions. The institution offers a wide range of programs including engineering degrees, masters, doctoral studies, and continuing education, supported by multiple research laboratories and international partnerships. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and professionals. Technically, the site is built on Drupal CMS with modern JavaScript libraries and privacy-respecting analytics (Matomo). Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

SDIS34 is the official fire and rescue service for the Hérault department in France, providing essential public safety services including firefighting, rescue operations, prevention, and recruitment of volunteer and professional firefighters. The website serves as an information portal for residents and stakeholders, offering news, practical information, and access to services. The organization maintains a strong social media presence and uses modern web technologies to deliver content effectively. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder and Slider Revolution, integrating Google Maps for location services. The site is secured with HTTPS and employs standard security headers, reflecting a good security posture. Performance and mobile optimization are adequate, though accessibility could be improved. Security-wise, the site shows good practices like HTTPS enforcement and no visible vulnerabilities. However, the absence of explicit privacy, cookie, and terms of service pages, as well as missing WHOIS data, slightly reduce trust and compliance confidence. There is no visible incident response or vulnerability disclosure information. Overall, SDIS34's website is a professional and trustworthy public service platform with room for improvement in privacy compliance and transparency. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding security and incident response information, and ensuring WHOIS data availability to enhance legitimacy and trust.

Tourisme Hérault operates an official regional tourism website promoting the Hérault region in Southern France. The site offers rich multimedia content, multilingual support, and detailed information about natural and cultural attractions, targeting tourists and holidaymakers. The business model focuses on tourism promotion and visitor engagement through surveys, videos, and inspirational content. Technically, the website is built on WordPress with Elementor and integrates modern analytics and tracking tools such as Google Tag Manager and Matomo. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are not detected and no explicit incident response contacts are provided. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the site is trustworthy and well-maintained but would benefit from improved transparency in domain registration and contact information.

Montpellier Tourisme operates as the official tourism promotion website for Montpellier, France, providing comprehensive information on local attractions, events, accommodations, and activities. The site targets tourists and visitors seeking to explore Montpellier and the surrounding region. It offers multi-language support and integrates booking and event management services to enhance user experience. Technically, the website employs a modern stack including WordPress CMS with a custom Woody theme, various JavaScript libraries, and third-party integrations such as Django Travel and touristic maps. The site is well-optimized for mobile devices and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of publicly available WHOIS data and privacy policy reduces transparency slightly but does not detract significantly from the site's legitimacy. Overall, Montpellier Tourisme presents a professional, trustworthy, and user-friendly platform for tourism promotion.

Un Métier de Ouf is a French educational platform launched in 2020, dedicated to promoting artisan trades such as mechanics, carpentry, cooking, and aesthetics. It targets young people and apprentices seeking career guidance in artisan professions. The website is affiliated with CMA France, a reputable organization supporting artisan trades. The platform offers video content and career resources to engage its audience and facilitate discovery of trades. Technically, the site is built using modern React and Next.js frameworks, hosted by OVH, and integrates analytics tools like Matomo, TikTok, and Facebook pixels. Privacy and cookie consent mechanisms are implemented, reflecting good compliance practices. Security posture is solid with HTTPS and no exposed vulnerabilities, though security headers and incident response policies could be improved. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear branding and consistent content quality.

Aides-entreprises.fr is a French government-affiliated platform managed by CMA France, providing a comprehensive database of over 2400 public financial aids for businesses. The website serves as a key resource for French businesses seeking financial support, offering advanced search tools, newsletters, and a mobile application to enhance accessibility and user engagement. The platform is well-positioned as a trusted reference in the French business aid ecosystem, supported by numerous partnerships with governmental and regional agencies. Technically, the site leverages AngularJS and Ionic frameworks, integrates Google Maps API, and uses Matomo for analytics, indicating a modern and moderately performant infrastructure. Security practices include HTTPS enforcement and GDPR-compliant cookie consent, though some security headers could be improved. Overall, the site demonstrates a good security posture with no critical vulnerabilities detected. The domain's WHOIS data confirms a long-standing and consistent registration, reinforcing the platform's legitimacy. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

blackpills studio is a media production company specializing in the development, production, and international distribution of premium short-form series. The company positions itself as an international content producer with a focus on mobile and SVOD platforms, targeting a general audience interested in original series. The website reflects a small-sized media business founded in 2006, with consistent branding and a professional online presence hosted on the MyPortfolio platform and OVH infrastructure. Technically, the site uses modern web technologies including HTTPS, JavaScript, and Typekit fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and formal privacy or security policies. No contact information or detailed compliance documentation is present, which limits transparency and user trust. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

Altice Europe was a major telecommunications company with a long-standing domain registration since 2003. The website currently serves as an archive following the company's delisting and cessation of operations. It primarily directs investors to Altice France and Altice International for ongoing information. The technical infrastructure is based on Drupal CMS with legacy JavaScript libraries, showing moderate digital maturity. Security posture is basic with HTTPS enforced but lacking DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is functional but minimal, with limited business and security disclosures.

APRR is a major motorway concession operator in France, managing a 2,410 kilometer network focused on sustainable and efficient mobility solutions. It operates under the umbrella of the Eiffage group, a large construction and infrastructure conglomerate. The website reflects a mature digital presence with comprehensive content about their services, sustainability initiatives, and corporate governance. Technically, the site uses modern JavaScript libraries, integrates video APIs, and employs cookie consent management tools, indicating a good level of digital maturity. Security-wise, HTTPS is enforced and reCAPTCHA is used, but explicit security headers and policies are not evident, suggesting room for improvement. The absence of WHOIS data is unusual but the website's branding and social media presence support its legitimacy. Overall, APRR's website is professional, compliant with privacy regulations, and serves its audience effectively.

Best4Run is a Czech Republic based specialty retailer focused on running shoes, apparel, and equipment. Established in 2015, it operates both an e-commerce platform and a physical store in Přerov, serving customers from surrounding regions. The website offers a comprehensive product catalog, educational content, and diagnostic services for runners. Technically, the site is built on the Shoptet e-commerce platform, leveraging modern web technologies and multiple analytics and marketing tools with user consent mechanisms. Security posture is good with HTTPS and CSRF protections, though some security headers could be improved. The absence of WHOIS data reduces domain trust but the website content and business presence appear professional and legitimate. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations.

Sykora spol. s r.o. is a Czech-based company specializing in high-quality custom kitchens and interior furniture solutions. Their website showcases a comprehensive product catalog including kitchens, wardrobes, bathrooms, and living room furniture, targeting consumers seeking tailored interior design. The company operates through multiple retail studios and emphasizes professional design and modern technology integration. Technically, the website is built on the Studio9 webManager CMS, uses modern JavaScript libraries such as jQuery, and integrates Google Tag Manager, Google Analytics, Facebook Pixel, and Pinterest tracking for marketing and analytics purposes. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and rich multimedia content. Security-wise, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security policies or incident response contacts. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains and does not raise legitimacy concerns. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for customers.

Restaurace Maxima is a small hospitality business based in the Czech Republic, specializing in traditional gastronomy with a modern twist. The website presents a professional and visually appealing interface that highlights their daily menus, event hosting, and quality culinary offerings. The business targets local customers, families, and corporate clients seeking quality dining experiences. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data and privacy policy pages indicates gaps in transparency and compliance. Security posture is moderate with cookie consent implemented but lacking security headers and incident response information. Overall, the website is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance documentation.

TAŠ STAPPA is a Czech Republic based company specializing in the supply of concrete and aggregates primarily serving the Zlín region. With over 25 years of experience, it positions itself as a reliable local supplier offering concrete delivery, pumping services, and concrete plant equipment. The website reflects a medium-sized business with a clear focus on construction materials and services. Technically, the site is built on Joomla CMS using modern frameworks and libraries such as Bootstrap, jQuery, and Smart Slider 3, with integrated Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not publicly documented. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear professional and consistent. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.

PURLIVE is a Czech-based certified manufacturer and supplier specializing in prefabricated construction systems primarily for family houses, modular wooden buildings, and container components. The company positions itself as a leading provider of energy-efficient and cost-effective building solutions in the Czech market. Their website reflects a professional digital presence with clear business offerings targeted at construction firms, architects, and private customers interested in modern prefabricated housing solutions. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Smart Slider 3, ensuring a responsive and user-friendly experience. The site integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing strategy. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies, which could be improved. The absence of WHOIS data for the domain is a notable gap in trust verification, though the website content and structured data suggest a legitimate business. Overall, the site scores well in content quality and business credibility but should enhance privacy compliance and security transparency to strengthen trust and compliance.

Selectra is a well-established international company specializing in utilities comparison and subscription services across energy, telecom, insurance, and finance sectors. Founded in 2007 and operating in 17 countries, Selectra serves a broad consumer base seeking to optimize household utility expenses. The website demonstrates strong branding, professional design, and extensive content supporting its market position as a leading player in its industry. Technically, the website employs modern tracking tools such as Google Analytics and Google Tag Manager, with DNS managed via Cloudflare and domain registration through Amazon Registrar. The site is mobile-optimized and SEO-friendly, though some technical improvements such as enabling DNSSEC and adding security headers could enhance security posture. Security-wise, the site uses HTTPS and domain status protections but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms, which is a notable gap given the tracking technologies in use. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security transparency to align with best practices and regulatory expectations.

The website www.yottabe.com is hosted on the Wix platform and appears to be a small or new business site with minimal content and no clear business description or contact information. The lack of WHOIS registration data raises concerns about the domain's legitimacy and ownership. Technically, the site uses standard Wix scripts and polyfills but lacks advanced security configurations and privacy compliance features. The absence of privacy policies, cookie consent mechanisms, and contact details further diminishes trustworthiness. Overall, the site demonstrates a low level of digital maturity and security posture, with significant gaps in compliance and transparency.

Zdravie.sk is a well-established Slovak health and lifestyle portal founded in 2004, operated by Zdravie.sk, s.r.o. It offers comprehensive health information, lifestyle content, medical news, and community forums targeting a general audience in Slovakia. The website enjoys a strong market position as a popular and trusted source of health-related content. Technically, the site uses a modern tech stack including Google Fonts, Google Analytics, Facebook SDK, and multiple advertising platforms. It is hosted with Google Domains and employs HTTPS for secure communications. However, the site lacks explicit privacy and cookie policies and does not display security headers, which are areas for improvement. No contact emails or phone numbers were found in the provided content, limiting direct communication channels. Overall, the site demonstrates good content quality and business credibility but could enhance privacy compliance and security posture.

Plnielanu.sk is a Slovak lifestyle and health-oriented media website operated under the company Zoznam, s.r.o. It provides inspirational content focused on maintaining a healthy and active lifestyle for a general adult Slovak-speaking audience. The website leverages a WordPress CMS with Yoast SEO for content management and optimization, supported by a range of modern marketing and analytics tools including Google Tag Manager, Facebook Pixel, Gemius, and Didomi for GDPR-compliant consent management. The site integrates advertising networks such as Google Ad Manager and Adform, indicating a business model reliant on content publishing and advertising revenue. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the website presents a professional and trustworthy digital presence consistent with a regional media brand.

The website zenske.joj.sk is a Slovak lifestyle media portal targeting contemporary women with content focused on fashion, health, relationships, and entertainment. It is operated by Slovenská produkčná, a.s., a recognized media company in Slovakia. The site features a professional design, consistent branding, and a clear navigation structure that supports user engagement. The business model is primarily advertising-driven, leveraging multiple ad networks and analytics platforms integrated with a consent management system to comply with privacy regulations. Technically, the site uses modern JavaScript libraries and ad bidding frameworks, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not published. Privacy compliance is supported by a visible cookie consent mechanism, but a dedicated privacy policy page was not found in the analyzed content. Overall, the domain registration data aligns well with the website's business claims, supporting high legitimacy and trustworthiness.

The website vysetrenie.zoznam.sk is a Slovak health and wellness media portal operated by Zoznam, s.r.o., a recognized media company in Slovakia. It provides a wide range of health-related content including articles, interviews, quizzes, and practical tools such as health calculators and listings of medical facilities. The site targets the general public interested in health, lifestyle, and medical information. Its business model is primarily content publishing supported by advertising revenue, positioning it as a significant player in the Slovak online media landscape focused on health topics. Technically, the website employs a modern technology stack including Google Tag Manager, jQuery, Vue.js, and multiple advertising and analytics platforms such as Google Ad Manager, Gemius, and Yieldbird. The site is mobile optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous loading of scripts to enhance user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. It uses a comprehensive consent management platform (Didomi) to comply with GDPR requirements, reflecting a mature privacy posture. However, explicit security policies and incident response contacts are not published, and there is no security.txt file for vulnerability disclosure. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a low-risk profile with strong legitimacy and trustworthiness, supported by consistent WHOIS registration data matching the business identity. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

Feminity.sk is a Slovak lifestyle media website operated by Zoznam, s.r.o., offering content focused on fashion, beauty, health, horoscopes, and celebrity news. The site targets a broad audience of modern Slovak men and women interested in lifestyle topics. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates multiple third-party analytics and advertising services, and uses a CDN for content delivery. It demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, uses standard security headers, and implements GDPR-compliant cookie consent mechanisms, though it lacks a dedicated security policy or incident response contact information. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

Športky.sk is a Slovak-language sports news portal operated by Zoznam s.r.o., providing comprehensive coverage of sports such as football, hockey, tennis, and cycling. The site targets Slovak sports fans with up-to-date results, event calendars, and multimedia content. It holds a solid market position as part of the established Zoznam media brand. Technically, the website employs modern JavaScript frameworks including Vue.js and jQuery, integrates Google Analytics and Tag Manager for tracking, and uses Didomi for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, HTTPS is enforced and basic security headers are present, though some headers like HSTS and X-Content-Type-Options should be confirmed or added. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear cookie policy and consent mechanism. However, explicit contact details and terms of service pages are not directly found on the site, which could be improved for transparency. Overall, the website is professional, trustworthy, and well-maintained, suitable for its audience and business model.